-buf [buffer size]

Allocates a buffer of size kilobytes (default 128) and starts collecting messages there. If the -buf argument is not set, the debug messages are printed to the console.

-m <module>

Specify the Security Gateway module you wish to debug. The default module is fw.

For example: fw ctl debug –m VPN all

[+ | -] <options|all|0>

Sets or resets debug flags for the requested gateway).

• If + is used, the specified flags are set, and the rest remain as they were.
• If - is used, the specified flags are reset, and the rest remain as they were.
• If neither + nor - are used, the specified flags are set and the rest are reset.

-h

Print a list of debug modules and flags.

0

Returns all flags in all gateways to their default values, releases the debug buffer (if there was one).

-d <comma separated list of strings>

Only lines containing these strings are included in the output. (Available in R70 or higher)

-d <comma separated list of strings>

Lines containing these strings are omitted from the output (Available in R70 or higher)

For example:

fw ctl debug –d error,failed,packet

Output shows only lines containing the words "error" or "failed" and not the word "packet"

-s <string>

Stop debug messages when a certain string is issues (Available in R70 or higher)

For example: fw ctl debug –s error

-x

Shuts down the debug.